Sangoma

Records98All Threatist records

Exploited (KEV)4In CISA KEV

CVSS critical21CVSS 9.0–10.0

CVSS high41CVSS 7.0–8.9

Exploited now

Sangoma records in CISA KEV

TI-2026-08422 Sangoma Switchvox SQL Injection Vulnerability CRITICAL 99KEV 2026-09-02 TI-2019-13698 Sangoma FreePBX Improper Authentication Vulnerability CRITICAL 100KEV 2026-02-03 TI-2025-39763 Sangoma FreePBX OS Command Injection Vulnerability CRITICAL 96KEV 2026-02-03 TI-2025-35702 Sangoma FreePBX Authentication Bypass Vulnerability CRITICAL 100KEV 2025-08-29

Components

Products in the NVD configurations · select one to filter the records

Freepbx 50 records CRITICAL Asterisk 28 records HIGH Certified Asterisk 15 records HIGH Restapps 2 records MEDIUM Session Border Controller Firmware 2 records MEDIUM Switchvox 2 records CRITICAL Voicemail 2 records LOW Filestore 1 record CRITICAL

Records

2 records in Session Border Controller Firmware · all components

TI-2019-09069 CVE-2019-12148 · GHSA-g96f-3wfx-54p9

The Sangoma Session Border Controller (SBC) 2.3.23-119 GA web interface is vulnerable to…

MEDIUM 48

The Sangoma Session Border Controller (SBC) 2.3.23-119 GA web interface is vulnerable to an authentication bypass via an argument injection vulnerability involving special characters in the username field.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03502 Published 2019-10-22 No fix listed CWE-88

TI-2019-09068 CVE-2019-12147 · GHSA-mvf4-5ff5-whch

The Sangoma Session Border Controller (SBC) 2.3.23-119 GA web interface is vulnerable to…

MEDIUM 47

The Sangoma Session Border Controller (SBC) 2.3.23-119 GA web interface is vulnerable to Argument Injection via special characters in the username field.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02604 Published 2019-10-22 No fix listed CWE-88

Open these records in search →

Critical	21
High	41
Medium	34
Low	2
No CVSS	0